Privacy Policy

Introduction

Dora Clinics (Dora Clinic) in Riyadh is committed to protecting our customers' privacy. This policy explains what data we collect when you use the Dora mobile app or the dora.clinic website, why we collect it, how we protect it, and the rights you have under the Saudi Personal Data Protection Law (PDPL).

This policy covers both the app and the website. Medical and treatment records are managed inside the clinic's systems under health regulations; the app only shows reservation, appointment and payment data.

Data we collect

Account data: your name, mobile number (your primary sign-in), date of birth, national or iqama ID number, and preferred language.

Reservation data: the services you reserve, branch, doctor, session dates and history, the reservation reference code (such as DR-12345), and the status of each reservation.

Financial data: recorded payments, wallet balance and prepaid package credits with their usage history, and invoice details. We do not store bank card numbers in our systems.

Technical data: device model, operating system, app version, and crash and performance reports — for diagnostics only, never linked to health content.

What the app does not collect

The app does not request access to your location, contacts, camera, photos, or microphone. The dora.clinic website uses no tracking cookies and no third-party analytics.

Why we collect this data

Creating your account and verifying it with a one-time code (OTP) delivered by SMS or WhatsApp.

Managing reservations and appointments: confirmation, reminders, rescheduling, and cancellation.

Applying the correct VAT treatment based on your ID type, as required by Saudi tax regulations — this is the only purpose for which the ID number is collected.

Managing your wallet, prepaid packages, and session usage history.

Improving app stability and service quality through diagnostics.

Our legal bases under the PDPL are: performing our contract with you, complying with legal obligations (tax and health), and our legitimate interest in improving the service.

Sharing

We never sell your data, and we never use it to market for third parties. We share the minimum necessary with processors working on our behalf and under our instructions:

The verification-code provider (SMS or WhatsApp) receives your mobile number only. The technical crash-monitoring service receives device and app diagnostics. Approved invoicing systems issue tax invoices and keep us compliant with ZATCA requirements.

Some diagnostic data may be processed by providers outside the Kingdom, subject to the PDPL's data-transfer controls. We may also disclose data where the law requires it or a competent authority requests it.

Storage on your device

The app stores session tokens in the operating system's secure storage (such as iOS Keychain) and stores no passwords. Signing out revokes the session in our systems.

Retention and security

We keep account data while your account is active, and reservation and invoice data for the periods required by health and tax regulations in the Kingdom.

We protect data with encryption in transit, strict access controls inside our systems, and staff access limited to what their role requires.

Your rights and account deletion

You may request access to your data or a copy of it, correction of it, and deletion of your account and data — subject to statutory retention periods for tax and health records.

To request account deletion: contact us through the channels below from your registered mobile number; we will carry out and confirm the request within a reasonable period. You may also lodge a complaint with the Saudi data-protection authority.

Children

Our services and app are intended for adults aged 18 and above. We do not create accounts for anyone younger.

Changes to this policy

We may update this policy from time to time. The updated version is published on this page with its last-updated date. If a change is material, we will notify you in the app.

Contact

For privacy inquiries or rights requests: email admin@doraclinic.sa or call our unified number 920020959.